Administration Guide Advanced Authentication Version 5.5 Legal Notice For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, https://www.netiq.com/company/legal/. Copyright © 2016 NetIQ Corporation, a Micro Focus company. All Rights Reserved. Contents About NetIQ Corporation 7 About this Book 9 1 Advanced Authentication Overview 11 1.1 How Is Advanced Authentication Better Than Other Solutions . 11 1.2 Key Features . 11 1.3 Advanced Authentication Server Components. 12 1.3.1 Administration Portal . 12 1.3.2 Self-Service Portal . 13 1.3.3 Helpdesk Portal . 13 1.3.4 Reporting Portal. 13 1.4 Architecture . 14 1.4.1 Basic Architecture . 14 1.4.2 Enterprise Level Architecture. .15 1.4.3 Enterprise Architecture With A Load Balancer . 17 1.5 Terminologies . 18 1.5.1 Authentication Method . 18 1.5.2 Authentication Chain . 18 1.5.3 Authentication Event . 18 1.5.4 Endpoint. 18 1.5.5 Tenant . 18 Part I Installing and Upgrading Advanced Authentication 19 2 System Requirements 21 3 Installing Advanced Authentication 23 4 Upgrading Advanced Authentication 25 Part II Configuring Advanced Authentication 27 5 Configuring the Basic Settings 29 5.1 Configuring Host Name . 29 5.2 Configuring HTTP Proxy Server. 30 5.3 Configuring Appliance Networking . 30 5.4 Configuring Time and NTP Servers . 30 5.5 Rebooting Appliance . 30 5.6 Shutting Down Appliance . 31 6 Configuring Global Master Server 33 6.1 Configuring YubiHSM. 33 Contents 3 7 Logging In to the Advanced Authentication Administrative Portal 35 8 Configuring Advanced Authentication Server Appliance 37 8.1 Adding a Tenant . 37 8.2 Adding a Repository. 38 8.2.1 Advanced Settings. 39 8.2.2 Used Attributes . 42 8.2.3 Local Repository . 45 8.3 Configuring Methods . 46 8.3.1 Bluetooth . 46 8.3.2 Card . 47 8.3.3 Email OTP . 47 8.3.4 Emergency Password . .48 8.3.5 Fingerprint . 48 8.3.6 FIDO U2F . 49 8.3.7 LDAP Password. 51 8.3.8 OATH OTP. 51 8.3.9 Password . 53 8.3.10 PKI . 54 8.3.11 Radius Client . 55 8.3.12 SMS OTP. 56 8.3.13 Security Questions. 56 8.3.14 Smartphone . 58 8.3.15 Swisscom Mobile ID . 60 8.3.16 Voice . 60 8.3.17 Voice OTP . 61 8.4 Creating a Chain . 62 8.5 Configuring Events. 63 8.5.1 ADFS . 66 8.5.2 AdminUI . 66 8.5.3 Authenticators Management . 66 8.5.4 Helpdesk . 67 8.5.5 Helpdesk User . 67 8.5.6 Linux Logon . 67 8.5.7 Mac OS logon . ..